Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa
File:                     1AEC708A26EA11F0A1989F5AC4F9AE02.roa (raw, json)
Hash identifier:          JVaZUZm0NAyjAd/+LVRQi99eCXeUGHHM5HXQ82YfKlU=
Subject key identifier:   38:DA:E0:B8:75:15:5A:A5:56:1A:B8:C0:AF:B5:18:1B:27:A0:C2:9A
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       064B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:51:43 +0000
ROA not before:           Wed 09 Sep 2026 01:51:43 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     138997
IP address blocks:        218.33.84.0/22 maxlen: 24
                          218.33.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 01:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1611 (0x64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:51:43 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbaf-6fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:d6:de:05:77:2b:cd:e4:0e:30:a7:f8:9e:
                    a4:d4:73:1d:e2:4d:09:bd:52:87:66:83:99:a9:a6:
                    2b:64:a1:85:85:e1:47:79:93:b2:b2:34:41:9a:25:
                    7f:50:1d:dd:d6:4d:34:1c:ae:23:6d:eb:05:29:27:
                    e9:31:03:ea:20:ac:93:55:52:3b:50:df:2d:bd:99:
                    87:a8:5a:8b:e0:f6:1c:4b:82:65:ff:66:04:b6:b0:
                    3f:56:d2:18:f8:2f:5f:9b:fe:81:6e:df:ca:75:38:
                    ca:d2:04:d0:ac:22:42:18:85:c8:ec:69:b4:d8:43:
                    42:58:6b:81:fc:65:8b:87:c3:a8:ed:f4:56:94:5a:
                    a3:8c:69:8b:37:4a:90:cf:4e:e9:2e:a3:aa:a8:58:
                    6b:1a:b4:20:4a:2d:b5:d2:67:2b:28:fa:dc:5d:7f:
                    16:f5:ac:7a:54:93:5a:ec:9c:7e:27:c0:1c:b8:c2:
                    8c:02:ef:e4:11:c7:68:d2:36:c2:dc:2d:9f:ab:7f:
                    91:3e:fe:ba:1d:0c:ef:43:67:78:12:1e:c9:10:b7:
                    8e:66:bc:05:fa:7b:fe:2f:7f:22:c0:41:3b:9d:fc:
                    67:ea:67:94:1a:b7:19:74:b3:8d:b7:f5:83:75:ed:
                    91:29:31:d7:3d:19:ea:47:1a:c4:e3:e7:99:95:6e:
                    c2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DA:E0:B8:75:15:5A:A5:56:1A:B8:C0:AF:B5:18:1B:27:A0:C2:9A
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1AEC708A26EA11F0A1989F5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.84.0-218.33.91.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:40:ab:f3:22:6d:cf:6f:2f:3a:d7:43:ad:4a:58:61:dc:
         73:e6:f4:5b:55:c4:54:f6:ea:20:8f:6a:6e:9d:ce:c9:b8:0b:
         6d:d5:c9:a3:84:e9:7e:3d:df:00:d8:c1:a2:00:55:d8:5a:a4:
         c3:3f:8c:2f:44:6f:dd:b4:cc:53:f6:fc:1c:94:92:b2:4f:e0:
         9e:de:37:81:ad:0c:95:04:23:cd:0c:29:d4:0f:78:62:0a:b6:
         1f:3b:31:e8:f7:6c:53:47:f8:cf:34:55:0e:cc:d2:a6:e8:c6:
         90:ed:62:84:c1:b3:cc:5c:24:d9:34:0e:43:63:4e:6a:bd:80:
         5f:cd:03:9c:8f:e7:a2:35:71:4e:e6:68:cb:f2:01:00:3a:ec:
         17:1c:77:4b:be:76:d3:9e:5b:69:3b:69:72:5a:8c:df:ae:b2:
         1b:f5:1c:e7:9e:76:9d:35:b4:a9:cc:e2:c1:77:44:5a:b1:f2:
         51:90:34:84:9e:49:94:26:f0:3c:20:cf:0c:32:4c:ff:37:ac:
         d2:e0:c9:05:c9:57:c9:36:a5:ea:ff:00:e2:08:bc:99:72:b2:
         1b:41:a8:ef:73:19:f9:d0:e3:99:b9:8e:79:ab:aa:24:27:93:
         16:cd:39:39:9b:b8:09:a6:4d:68:96:24:c8:ea:73:4f:9f:c6:
         1b:23:f7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:50:48 2026 by rpki-client